Chart Doctor

Privacy

Effective 8 October 2026

This is a small, independently operated chart repair tool. It collects the information needed to verify a submission, repair the chart, return the result, prevent abuse, and understand where the tool needs work.

What the tool collects

• Your email address and the verification code sent to it.
• The chart or dataset you upload, your optional prompt, and any later feedback.
• The repaired charts, renderer source, repair logs, and model conversations produced while working on your chart.
• Hashed session, email, and network-address identifiers used for access controls, daily limits, and abuse prevention.

When processing starts

An upload is held temporarily while you verify your email. It is not sent for repair or archived in Google Drive until you enter the code and agree to the storage notice beside it. Unfinished submissions and local working files are removed after roughly 24 hours.

How the information is used

The information is used to send the verification code, produce and refine your chart, make the result available in your browser, enforce usage limits, diagnose failures, and review and improve the tool. It is not sold or used for advertising.

Services involved

Google Gmail sends the verification email. After consent, the submission and its repair records are stored privately in Google Drive and Google Sheets. A third-party AI model API processes the chart and text needed for the repair. The public site and its temporary working files run on a privately managed server.

Storage and access

Verified submissions and repair records are kept in private, app-owned Google Drive folders and Sheets so they can be reviewed and used to improve the tool. Archived records are retained until deleted. They are not made public. Access is limited to the operator and the service providers needed to run the repair. Browser verification lasts seven days; the cookie contains a random session identifier rather than your email address.

API access with your own OpenRouter key

API signup verifies your email and stores your email address and a hash of your Chart Doctor token for access control. The token is shown only once. Verifying again replaces your token; your job access and usage limits stay with your account. You can revoke your token from the API access page while it is displayed, or use the API's token-revocation endpoint. Replacing a lost token also revokes the old one.

API submissions use your OpenRouter key and bill your OpenRouter account. The key is held in a private server file until the isolated worker reads and deletes it. Unused credentials expire after one hour; worker completion or interruption also removes them. Chart Doctor never substitutes its own key. Your charts and instructions are sent to OpenRouter and the configured model providers. API charts, outputs and working files are removed after 24 hours; they are not archived in Google Drive or logged in Google Sheets. The operator can access retained server files. Account records remain until deleted; contact the operator to request account deletion.

Your choices

You can leave before email verification and the pending upload will expire. You can also ask for a verified submission and its archived records to be deleted. Use the contact details on karthiks.co and include enough information to identify the submission. Do not put private chart data in a public GitHub issue.

Changes

This page will be updated if the tool starts collecting information for a new purpose or changes the services it relies on. The effective date above records the latest revision.